deploy-npm
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses standard shell commands for repository management (git), GitHub interaction (gh), and package management (npm/pnpm). These commands are transparently documented and strictly related to the skill's primary purpose of automating release workflows.
- [EXTERNAL_DOWNLOADS]: Interacts with well-known official services, including GitHub and npm, for state discovery and package verification. These communications are routine for CI/CD operations.
- [COMMAND_EXECUTION]: Utilizes the
gh pr merge --adminflag, which allows bypassing repository branch protections. While powerful, this is a standard administrative capability of the GitHub CLI and is explicitly documented for resolving specific CI bottlenecks during the release process.
Audit Metadata